oscar_ransomware | 055db0c06d81258807fc2132924068d744809ce46cfa0de045410cd400ae1ab7

Analysis

max time kernel
149s
max time network
149s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
28/05/2026, 10:27

Target
055db0c06d81258807fc2132924068d744809ce46cfa0de045410cd400ae1ab7.exe
Size 90KB
Sample260528-mhh9daev8v
SHA256 055db0c06d81258807fc2132924068d744809ce46cfa0de045410cd400ae1ab7
MD5 5421716788c33ac20f75e7c26a8f93c4
SHA1 8284a87ac72a6cafb294a1e6d1ed4494cf1b772b
SHA512 2a6d25399512463a1a7a5f4a9ad0a515786e6e97f9e1370bddb47555518307df2793aeda3e8092b7dfbcfcf71bfa9515515f768298841528732b69f995065348
SSDEEP 768:omFYGinE/2cDGIQGLLcMXyWc3FEkwhB8B1Jo7vINoWAwG:NfDX9Lh4zwhB8B1Jo7wNoW
TLSH
T1DE93D816726520B7D576C039A8C2522AFDB13055033A1AFF95008AFCAF707ECBE3DA56
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Family: OscarRansomware
OscarRansowmare is an Windows ransomware written in C++.
ransomware oscar_ransomware

Detects OscarRansomware 1 IoCs

resource	yara_rule
behavioral2/memory/5124-0-0x00007FF79E240000-0x00007FF79E26D000-memory.dmp	family_oscarransomware

C:\Users\Admin\AppData\Local\Temp\055db0c06d81258807fc2132924068d744809ce46cfa0de045410cd400ae1ab7.exe
"C:\Users\Admin\AppData\Local\Temp\055db0c06d81258807fc2132924068d744809ce46cfa0de045410cd400ae1ab7.exe"
1⤵
PID:5124